a44bc10834b3740e164367444cabba6185cdb9a89b2430c9117fa1578c8b1eff | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a44bc10834b3740e164367444cabba6185cdb9a89b2430c9117fa1578c8b1eff
Size

73KB
Sample

240915-ar928swapg
MD5

54c022caea4b19107db5530accf1d3c1
SHA1

bd582ffad138b1edfab8e96cf3a0a41abaf4a5fa
SHA256

a44bc10834b3740e164367444cabba6185cdb9a89b2430c9117fa1578c8b1eff
SHA512

6dc02bf7b1514bdad5537284275f63420fd775b4fa7855ff619ebfbbbe5e8cf3eba3c099a12e7d0c3665dde2309fc884a376ed8302979ca1cebc8afeb4735a8f
SSDEEP

1536:KeZou7+sSn2bJgig+1ZpUENFI5YMkhohBM:1ou7+72tRgcYENWUAM

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  a44bc10834b3740e164367444cabba6185cdb9a89b2430c9117fa1578c8b1eff
- Size
  
  73KB
- MD5
  
  54c022caea4b19107db5530accf1d3c1
- SHA1
  
  bd582ffad138b1edfab8e96cf3a0a41abaf4a5fa
- SHA256
  
  a44bc10834b3740e164367444cabba6185cdb9a89b2430c9117fa1578c8b1eff
- SHA512
  
  6dc02bf7b1514bdad5537284275f63420fd775b4fa7855ff619ebfbbbe5e8cf3eba3c099a12e7d0c3665dde2309fc884a376ed8302979ca1cebc8afeb4735a8f
- SSDEEP
  
  1536:KeZou7+sSn2bJgig+1ZpUENFI5YMkhohBM:1ou7+72tRgcYENWUAM
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence